$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a7081ce6-d0a5-398a-90e4-2bf4df0d85e7.roa File: a7081ce6-d0a5-398a-90e4-2bf4df0d85e7.roa (raw, json) Hash identifier: x5ffGnqw6+YK1+pFafUELef3u5J+KQZ6rP61uDRmy/s= Subject key identifier: 1F:19:DD:C4:BA:D6:42:49:DB:4A:68:66:63:45:B1:C1:64:B3:B4:36 Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584AE891313DDA3A68D57F3D8A40 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a7081ce6-d0a5-398a-90e4-2bf4df0d85e7.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 396085 IP address blocks: 72.249.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:31:3d:da:3a:68:d5:7f:3d:8a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=ba1142ca-a917-4938-8e99-3147a8d8beb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:bc:0e:cf:34:09:4e:b2:1b:10:b2:18:7b:61: 1b:98:14:e7:50:98:ae:0f:11:0d:0f:93:74:d3:ea: 75:e3:ca:da:eb:c1:24:90:ca:41:aa:09:42:4c:56: 24:79:f0:72:42:79:4f:e7:59:c0:b8:54:97:32:cb: 8b:2f:de:de:b0:d3:45:78:ca:ab:c9:43:12:ed:f2: 2f:27:b1:07:14:e8:02:32:06:34:21:5d:e5:20:54: b2:b0:57:29:97:d6:55:d1:09:a6:70:87:11:0e:b2: 90:79:4a:21:c0:3e:ad:3f:22:99:92:a2:1b:4b:e6: 0c:ec:ef:0e:2c:a7:38:76:9c:5d:94:3b:83:5e:a7: 3b:cf:3a:0b:ff:77:8f:fc:18:f6:77:47:6c:2c:f9: 74:4c:af:10:f9:db:a7:b8:15:47:62:41:79:6d:a7: 34:94:41:cf:50:0c:18:a1:48:7c:7d:ca:5c:f2:97: 48:fd:be:1d:bc:17:92:6f:e7:ce:e6:13:a3:0e:b1: 78:5d:23:97:78:04:f8:32:42:2e:84:2e:04:d8:0d: 1b:57:1d:3c:88:fd:11:af:3c:4b:b8:75:15:22:d5: d9:94:43:eb:ae:09:fe:45:ce:fd:ac:fe:55:13:87: ba:34:68:2e:e5:53:3b:3b:a8:e1:e1:82:1b:e4:91: d0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:19:DD:C4:BA:D6:42:49:DB:4A:68:66:63:45:B1:C1:64:B3:B4:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a7081ce6-d0a5-398a-90e4-2bf4df0d85e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 72.249.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:30:07:bf:a4:76:bc:4d:59:39:a5:e8:66:ad:bc:dc:60:d0: f1:cd:0d:63:40:51:c9:45:23:28:b4:e3:7a:13:16:b0:d6:3a: a4:82:d1:79:7b:b9:96:22:a2:2a:56:7b:0d:77:4b:33:4f:0f: 97:fb:b7:24:7e:07:08:86:a1:67:12:60:33:c5:bb:1f:e0:0a: a0:39:d2:c8:f5:38:48:d4:7b:79:c5:10:27:11:4b:4b:23:e2: 93:32:08:a6:fc:72:04:4b:31:7a:4c:94:41:98:c6:35:36:d0: b6:69:cb:b8:12:36:9e:b7:e1:ba:18:65:c9:7a:f9:b4:5b:10: 49:9e:2d:28:59:e6:c9:44:d8:26:8c:ee:9e:70:5e:b3:45:61: 44:3d:ac:7c:2a:09:6b:61:da:6c:4e:f9:c9:68:54:eb:8f:d5: c6:3c:d1:9d:ce:b4:d7:1f:08:f3:71:8f:50:93:50:be:df:ef: 33:f8:a1:db:fe:15:8f:38:71:46:39:36:b5:16:91:3b:ad:28: 53:83:dd:d1:90:be:78:c1:f9:81:af:82:fd:9d:6a:d0:de:0a: 18:f5:34:d2:5f:de:92:7e:1b:45:ec:dd:26:e6:51:f0:98:8b: e7:21:82:92:d0:fc:7c:71:15:b6:9c:43:c3:cc:63:2a:5c:f2: fc:56:2c:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokTE92jpo1X89ikAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk YmExMTQyY2EtYTkxNy00OTM4LThlOTktMzE0N2E4ZDhiZWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLwOzzQJTrIbELIYe2EbmBTnUJiuDxEND5N0 0+p148ra68EkkMpBqglCTFYkefByQnlP51nAuFSXMsuLL97esNNFeMqryUMS7fIv J7EHFOgCMgY0IV3lIFSysFcpl9ZV0QmmcIcRDrKQeUohwD6tPyKZkqIbS+YM7O8O LKc4dpxdlDuDXqc7zzoL/3eP/Bj2d0dsLPl0TK8Q+dunuBVHYkF5bac0lEHPUAwY oUh8fcpc8pdI/b4dvBeSb+fO5hOjDrF4XSOXeAT4MkIuhC4E2A0bVx08iP0RrzxL uHUVItXZlEPrrgn+Rc79rP5VE4e6NGgu5VM7O6jh4YIb5JHQswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8Z3cS61kJJ20poZmNFscFks7Q2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvYTcwODFjZTYtZDBhNS0z OThhLTkwZTQtMmJmNGRmMGQ4NWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPkiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADowB7+kdrxNWTml6GatvNxg0PHNDWNAUclFIyi043oTFrDWOqSC0Xl7 uZYioipWew13SzNPD5f7tyR+BwiGoWcSYDPFux/gCqA50sj1OEjUe3nFECcRS0sj 4pMyCKb8cgRLMXpMlEGYxjU20LZpy7gSNp634boYZcl6+bRbEEmeLShZ5slE2CaM 7p5wXrNFYUQ9rHwqCWth2mxO+cloVOuP1cY80Z3OtNcfCPNxj1CTUL7f7zP4odv+ FY84cUY5NrUWkTutKFOD3dGQvnjB+YGvgv2datDeChj1NNJf3pJ+G0Xs3SbmUfCY i+chgpLQ/HxxFbacQ8PMYypc8vxWLO0= -----END CERTIFICATE-----Generated at Sun Aug 24 05:45:54 2025 by rpki-client